Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/hj2ntpQ3M5_b-EiuEZYYDO5P9Xg.roa
File: hj2ntpQ3M5_b-EiuEZYYDO5P9Xg.roa (raw, json)
Hash identifier: T5T3quxL/Q1U36wMiLm8IHXOnXCpntNi0uP3lMyfVhE=
Subject key identifier: 86:3D:A7:B6:94:37:33:9F:DB:F8:48:AE:11:96:18:0C:EE:4F:F5:78
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01A0ED39BDD3D91E3B77953523B3A5037A90
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/hj2ntpQ3M5_b-EiuEZYYDO5P9Xg.roa
Signing time: Tue 29 Sep 2026 12:52:59 +0000
ROA not before: Tue 29 Sep 2026 12:52:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201708
IP address blocks: 185.62.172.0/23 maxlen: 24
185.62.172.0/24 maxlen: 24
185.62.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:39:bd:d3:d9:1e:3b:77:95:35:23:b3:a5:03:7a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Sep 29 12:52:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=863da7b69437339fdbf848ae1196180cee4ff578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:73:67:d4:89:86:6f:b2:a3:a9:61:ac:88:
3c:e1:4e:fc:72:df:e9:f5:99:2a:eb:2d:6e:f7:09:
98:3f:50:63:95:3b:48:16:5f:77:d1:8c:30:6b:68:
5e:44:cd:83:06:54:5e:84:f2:21:fe:82:d4:27:ce:
30:fb:b8:7a:e9:5c:45:5f:5d:14:5e:f9:4b:76:79:
12:cb:7d:b9:b5:a5:0c:34:c8:a6:bf:47:54:06:0f:
22:41:72:83:b3:39:03:ef:5a:76:2e:88:e1:3a:ec:
8e:4f:8f:02:88:40:e5:21:8b:46:64:24:bb:77:fe:
13:e0:3f:9d:59:d6:a6:57:7a:78:47:06:f8:ca:ef:
b8:1a:c3:1b:f4:99:3f:f7:85:4d:ab:3a:a9:9e:88:
bd:18:0a:18:a6:71:36:b1:c1:40:9d:31:3f:07:99:
7d:f2:56:c4:bd:98:04:a6:df:f6:73:b3:ec:a4:0a:
e3:77:b0:74:59:a7:98:1c:16:5c:f8:9b:d0:4e:57:
43:6a:f5:31:65:68:16:8d:97:f4:e6:f7:02:39:93:
f9:c5:41:ec:bb:f0:53:c4:d6:58:ee:d1:34:08:47:
24:3f:41:c0:12:11:50:f7:90:56:52:45:2a:03:55:
d3:71:e0:59:29:3c:7a:8a:4f:cc:91:9c:0d:89:6d:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3D:A7:B6:94:37:33:9F:DB:F8:48:AE:11:96:18:0C:EE:4F:F5:78
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/hj2ntpQ3M5_b-EiuEZYYDO5P9Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.172.0/23
Signature Algorithm: sha256WithRSAEncryption
64:51:d2:b3:b7:1d:6b:2d:27:f9:33:b5:9a:e5:63:13:fc:96:
ce:1c:d7:51:36:53:32:f9:00:14:3b:2b:9b:bf:7e:34:cc:0c:
76:64:77:9e:b3:99:0b:e6:92:e0:67:07:8a:23:2f:d9:0d:85:
83:fd:87:4d:3b:c0:88:f1:a8:27:fb:aa:0b:94:0f:cf:2b:5f:
f7:4e:8c:c5:13:49:a9:4d:67:1b:9d:27:b8:aa:46:1e:3c:03:
83:ae:18:b1:e2:46:bc:c8:5a:fc:11:11:ee:73:5d:dd:92:2d:
26:12:73:4c:1d:0a:70:89:3b:1a:03:30:56:da:2a:59:9b:6b:
9f:1e:67:d1:5b:a3:1f:d0:57:61:78:f2:8e:a4:f8:9b:c2:91:
45:21:7f:13:74:7a:d3:3a:56:4a:22:81:04:79:07:53:72:9a:
7d:b5:f3:46:7c:ec:d0:56:09:32:ff:1f:f3:88:3b:37:b9:1f:
55:98:4c:2e:06:41:80:57:c5:a2:36:a4:48:fd:b9:46:d5:50:
61:ba:3b:13:42:a5:98:91:6b:b6:f3:28:b6:ad:32:70:ed:c1:
ac:e6:36:43:14:4c:e3:af:41:3d:ec:10:b1:0d:3a:cc:64:b9:
dd:1c:18:74:21:29:0e:84:89:e0:a6:5b:3e:e9:07:78:ca:9c:
c6:bf:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:36:39 2026 by rpki-client